1

Copy the applicable dictionary file to your RADIUS server.

Examples:

Steel-Belted RADIUS server:

1. Copy this file from the Gaia to the RADIUS server:

   /etc/radius-dictionaries/checkpoint.dct

2. Add these lines to the vendor.ini file on the RADIUS server (keep in alphabetical order with the other vendor products in this file):

   vendor-product = Check Point Gaia
dictionary = nokiaipso
ignore-ports = no
port-number-usage = per-port-type
help-id = 2000

3. Add this line to the dictiona.dcm file:

   "@checkpoint.dct"

FreeRADIUS server:

1. Copy this file from the Gaia to the RADIUS server to the /etc/freeradius/ directory:

   /etc/radius-dictionaries/dictionary.checkpoint

2. Add this line to the /etc/freeradius/dictionary file:

   "$INCLUDE dictionary.checkpoint"

OpenRADIUS server:

1. Copy this file from the Gaia to the RADIUS server to the /etc/openradius/subdicts/ directory:

   /etc/radius-dictionaries/dict.checkpoint

2. Add this line /etc/openradius/dictionaries file immediately after the dict.ascend:

   $include subdicts/dict.checkpoint

2

Define the user roles on Gaia.

Add this Check Point Vendor-Specific Attribute to users in your RADIUS server user configuration file:

CP-Gaia-User-Role = "role1,role2,...

For example:

CP-Gaia-User-Role = "adminrole, backuprole, securityrole"

3

Define the Check Point users that must have superuser access to the Gaia shell. Add this Check Point Vendor-Specific Attribute to users in your RADIUS server user configuration file:

• If this user should not receive superuser permissions:

  CP-Gaia-SuperUser-Access = 0

• If this user can receive superuser permissions:

  CP-Gaia-SuperUser-Access = 1

1

Connect to the command line on Gaia.

2

Log in to Expert mode.

3

Run:

sudo /usr/bin/su -

The user now has superuser permissions.